The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85. CREATE(Triage):(User=admin) CVE-2020-28097 (https://nvd.nist.gov/vuln/detail/CVE-2020-28097)